CVE-2026-106295

Google Chrome versions prior to 155.0.8059.39 are vulnerable to incorrect authorization within the Unbounded Element component. This flaw allows a remote attacker who has already compromised the renderer process to spoof UI elements using a crafted HTML page. This issue has been identified as a M...

EUVD-2026-93767

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106232

UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93746

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106400

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a clickjacking attack within the Messages component. A remote attacker can leverage social engineering to spoof UI elements by tricking a user into interacting with a crafted HTML page . The vulnerability is associated with...

EUVD-2026-93738

Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93732

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106410

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106333

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106356

A clickjacking flaw exists in the EVP component of Google Chrome prior to version 155.0.8059.39 . A remote attacker can use social engineering and a crafted HTML page to spoof UI elements, potentially tricking users into performing unintended actions. The vulnerability is categorized with a Mediu...

EUVD-2026-93720

Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93716

UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106311

Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93713

UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106302

UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106182

UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106302

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the PermissionElement component. A remote attacker can leverage social engineering to spoof UI elements by navigating a victim to a crafted HTML page. This vulnerability (CWE-451) allows for the man...

CVE-2026-106282

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw in the WebOTP component. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements. No specific exploit details or in-the-wild exploitation instances are provided in the docume...

EUVD-2026-93715

UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106302

UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...